Privacy Policy

1. Who we are

TrueSKU is an inventory and stock management service operated by Truestone Software Ltd. In this policy, “TrueSKU”, “we”, “us” and “our” refer to Truestone Software Ltd.

If you have a question about this policy or how we use personal data, please contact us through the TrueSKU contact page.

2. What information we collect

Depending on how you use TrueSKU, we may collect and process:

• account information, such as your name, email address, organisation and login details;
• billing and subscription information. Payment card details are handled by our payment provider and are not stored by TrueSKU;
• inventory information, including SKUs, product references, stock quantities, suppliers, purchase orders and stock movements;
• listing and channel information received from services you choose to connect, such as Shopify and other supported sales channels;
• sales and order information supplied to TrueSKU by you, your software or connected services, where required to provide stock control and inventory functions;
• technical and security information, such as IP addresses, authentication events, application logs and diagnostic information;
• support messages, feedback and other information you choose to send to us.

3. Information from connected services

TrueSKU connects to third-party commerce and sales services only when you choose to connect them or provide credentials for them. We request access needed to provide the features you enable, such as reading product and listing information, reading inventory information, identifying stock locations and updating inventory quantities.

For Shopify, TrueSKU currently uses product, inventory and location information to import listings, associate listings with TrueSKU SKUs and synchronise inventory. TrueSKU does not currently request Shopify customer or order permissions through the TrueSKU Shopify app.

Information obtained from a connected service is used to provide TrueSKU's inventory and synchronisation functions and is not sold to third parties.

4. How we use information

We use information to:

• create and administer TrueSKU accounts;
• provide inventory, listing, stock movement, purchase order and stock synchronisation features;
• connect to services you authorise and carry out requested synchronisation tasks;
• process subscriptions and maintain billing records;
• provide support and respond to feedback;
• protect TrueSKU, investigate errors, prevent abuse and maintain service security;
• meet legal, accounting and regulatory obligations.

5. Our lawful bases

Under UK data protection law, we rely primarily on contract where processing is necessary to provide TrueSKU to you, legitimate interests where we operate, secure and improve the service, and legal obligation where we must retain or disclose information to comply with law. Where we rely on consent, you may withdraw that consent at any time.

6. How we share information

We use carefully selected service providers to operate TrueSKU. These may include cloud hosting and infrastructure providers, payment and subscription providers, email providers and the commerce or sales platforms that you choose to connect.

We share information only where necessary to provide the service, follow your instructions, protect our legal rights or comply with law. We do not sell personal data.

7. Security and credentials

We use technical and organisational measures intended to protect information held by TrueSKU. Sensitive channel credentials stored by TrueSKU are encrypted at rest. Access to TrueSKU accounts is protected by authentication and, except for tightly controlled temporary review arrangements where necessary for a platform's formal app review, multi-factor authentication requirements.

No internet service can guarantee absolute security. If we become aware of a personal data breach, we will assess and respond to it in accordance with applicable law.

8. International data transfers

Some service providers or connected platforms may process information outside the United Kingdom. Where UK data protection law requires safeguards for an international transfer, we take steps to ensure an appropriate transfer mechanism or other lawful safeguard is in place.

9. How long we keep information

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including providing the service, maintaining appropriate business and accounting records, resolving disputes and meeting legal obligations.

Retention periods vary according to the type of information. When an account or connection is removed, some information may remain for a limited period in backups, security records or records we are legally required to retain.

10. Your data protection rights

Depending on the circumstances, UK data protection law may give you rights to access your personal data, correct inaccurate data, request erasure, restrict processing, receive certain data in a portable format and object to certain processing.

To exercise a right, contact us through the TrueSKU contact page. We may need to verify your identity before acting on a request.

11. Shopify privacy requests and store disconnection

Where Shopify sends TrueSKU a valid privacy or deletion request relating to information handled by the TrueSKU Shopify app, we will process that request in accordance with applicable law and Shopify's platform requirements.

Disconnecting a Shopify store stops future synchronisation through that connection. Information already held in TrueSKU may be retained where necessary for the TrueSKU account, audit history, security, legal obligations or another lawful purpose, subject to applicable data protection rights.

12. Cookies and similar technologies

TrueSKU may use cookies or similar technologies that are necessary for login, authentication, security and core application functionality. If we introduce non-essential analytics, advertising or similar technologies that require consent, we will provide appropriate information and choices before using them where required by law.

13. Complaints

Please contact us first if you have concerns about how we use personal data so that we can investigate. You also have the right to complain to the UK Information Commissioner's Office.

Information about data protection rights and complaints is available from the Information Commissioner's Office.

14. Changes to this policy

We may update this privacy policy when TrueSKU, our integrations or legal requirements change. We will publish the current version on this page and update the date shown above.